Azure Cloud Engineer

Arctiq is a global, intelligence-driven technology services company delivering professional and managed services across Hybrid Cloud Infrastructure, Networking & Connected Experiences, Cybersecurity, Data & AI, Autonomous Operations & Intelligence, and Enterprise Service Management. We help organizations operate, secure, and modernize complex environments by unifying infrastructure, networking, data, security, automation, and observability under a single, integrated operating model. Our work focuses on helping customers reduce operational friction, improve resilience, and make better, faster decisions as their environments evolve. Arctiq builds on decades of industry expertise and a customer-centric ethos to deliver exceptional value to clients across diverse industries.

This is a Direct Hire, permanent opportunity with one of Arctiq's clients. Onsite presence is required Monday-Thursday in their Malvern, PA office with Friday being a remote day.

We are hiring a Cloud Infrastructure Engineer with deep Azure experience across platform engineering and daily operations, reliability, hybrid connectivity, and cloud governance. You will run, protect, and improve our enterprise Azure environment as we move to an infrastructure model defined entirely in code and delivered through pipelines, guided by the Microsoft Cloud Adoption Framework (CAF). This is an infrastructure operations role: expect a mix of hands-on engineering and routine support, while upholding NIST and FFIEC standards in a regulated financial services setting.

Core Responsibilities

Platform, Networking & Resiliency

• Maintain enterprise-scale Azure workloads and apply best practices in architecture, security, efficiency, and governance; take part in architecture and design reviews and help mature operations in line with CAF.
• Codify Azure Policy to enforce landing zone standards (management groups, subscriptions, RBAC, tagging) with Cloud Architecture.
• Manage spoke-level networking in the hub-and-spoke model (NSGs, Private Endpoints, Private DNS, routing) and enable secure connectivity for monitoring and operational tools, partnering with Network Engineering and Information Security.
• Troubleshoot connectivity across DNS, routing, NSG/firewall rules, private endpoints, Azure Firewall, Application Gateway/WAF, load balancers, and ExpressRoute.
• Implement multi-region resiliency for critical platforms so failover and recovery are predictable and meet FFIEC business continuity expectations; run DR and failover tests, perform root cause analysis, and advocate for designs that improve scalability, recoverability, and stability.

Infrastructure as Code, Automation & Monitoring

• Build and maintain Azure infrastructure as code with Bicep and reusable modules, deployed through CI/CD pipelines with peer review and pre-deployment validation; move existing environments to fully code-managed deployments by importing resources and fixing configuration drift.
• Automate recurring tasks with PowerShell, Azure CLI, Azure Automation, and pipelines, retiring manual processes where practical.
• Improve visibility with Azure Monitor, Log Analytics (KQL), workbooks, and actionable alerts.
• Maintain documentation, runbooks, standards, and architecture diagrams, versioned with the code where practical.

Security, Compliance & Data Platform

• Apply Zero Trust patterns using Entra ID, Privileged Identity Management, managed identities, Key Vault, and network segmentation.
• Work with Information Security on compliance, vulnerability remediation, segmentation, and audit readiness: conduct access reviews, validate configurations and policies, and produce evidence for internal audits and regulatory exams.
• Harden workloads to CIS and Microsoft baselines and track posture with Defender for Cloud and regulatory compliance initiatives.
• Support Microsoft Fabric infrastructure (private connectivity, cloud and on-premises data gateways, workspace administration, capacity management).
• Mentor engineers on infrastructure as code, Azure operations, and engineering best practices.

Day-to-Day Operations & Support

• Provide second- and third-tier support for Azure services, Entra ID, virtual machines, and performance issues; coordinate with the service desk and NOC to route and resolve escalations.
• Assist senior engineers with patch compliance reviews, backup monitoring, and performance tuning; contribute to onboarding automation, runbooks, and alert triage.
• Document DR readiness steps and root cause analysis for production-impacting events.
• Join the on-call rotation, responding to critical alerts during and after business hours and escalating as needed.
• Prepare and execute ServiceNow changes with documented plans, testing, validation, and backout steps.
• Verify Azure resource compliance through tagging, configuration reviews, and policy validation.

Required Qualifications

• 5+ years of enterprise cloud infrastructure and engineering experience, primarily Azure.
• Strong Azure networking skills (NSGs, routing, DNS, Private Link, hybrid connectivity troubleshooting).
• Hands-on proficiency with Bicep, ARM templates, and Azure Policy; Git-based workflows (branching, pull requests, code review) and CI/CD infrastructure deployment.
• Troubleshooting experience with Azure Monitor, Log Analytics (KQL), and Network Watcher.
• Solid understanding of Zero Trust and cloud security; experience with Entra ID, hybrid identity, RBAC, managed identities, and Key Vault.
• Operational experience with Azure IaaS and PaaS (VMs, App Services, Azure SQL, Storage) on Windows and Linux.
• Proficiency in PowerShell and Azure CLI for automation and support.
• Working knowledge of formal change management (ITIL or equivalent) and ServiceNow; familiarity with Agile or Scrum and with monitoring and logging tools.
• Excellent analytical, troubleshooting, communication, and documentation skills, and a commitment to continuous learning.
• Bachelor’s degree in Computer Science, Information Technology, or a related field, or equivalent experience.
• Experience in a regulated industry, including producing compliance evidence aligned to NIST or FFIEC.

Preferred Qualifications

• Microsoft Fabric or related Azure data services (Synapse, Data Lake), including gateways and private connectivity.
• Advanced Bicep module design and pipeline authoring in Azure DevOps or GitHub Actions.
• Defender for Cloud and security baseline hardening (CIS or Microsoft); familiarity with CAF and Azure landing zones.
• Azure Virtual Desktop and Dev Box image and host pool management.
• ExpressRoute failover behavior and multi-region network resiliency.
• Python scripting.
• Azure certifications (AZ-104, AZ-305, AZ-400, AZ-500, AZ-700); practical expertise is valued over certifications.

Arctiq is an equal opportunity employer. If you need any accommodations or adjustments throughout the interview process and beyond, please let us know. We celebrate our inclusive work environment and welcome members of all backgrounds and perspectives to apply.

We thank you for your interest in joining the Arctiq team! While we welcome all applicants, only those who are selected for an interview will be contacted.